RustDesk

Products

ProductCVEsExploitedLatest
RustDesk7–Sep 25, 2026
Client for Windows1–Feb 20, 2026

Exploited and recent CVEs

  • CVE-2026-100417 Low 3.1 RustDesk before 1.5.0 One-Way File Transfer Bypass 0.2%
  • CVE-2026-100388 Medium 5.4 RustDesk before 1.5.0 Missing Authorization Check on Incoming File Clipboard Messages 0.2%
  • CVE-2026-73108 High 7.5 RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodec 0.8%
  • CVE-2026-73102 Medium 5.7 RustDesk Path Traversal via macOS Clipboard File-Paste 0.4%
  • CVE-2026-76840 Critical 9.6 RustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse Length 0.4%
  • CVE-2026-57850 High 8.3 RustDesk Missing Session Scope Enforcement Allows Out-of-Scope Control Message Injection 0.5%
  • CVE-2026-58056 High 7.6 RustDesk - FileTransfer Session Authorization Scope Bypass 0.3%
  • CVE-2026-2490 Medium 5.5 RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability 0.4%